My guess is this is exactly what the "deal/no-deal" divergence talks are about. Today, the UK and EU GDPR rules are in alignment. But on the 2nd January, there's nothing to stop the UK from throwing them away.